Otp Disable

Disables two-factor authentication (2FA) for a user account after verifying a valid one-time password (OTP). Returns success status upon completion.

Endpoint

POST/v2/auth/otp/disable

Link

Gateway APIstagep.tst-apidmndelss.com

Request

Headers

Key	Value	Required
Authorization	Bearer <JWT>	Yes
Content-Type	application/json	Yes
Accept	application/json	Yes

Request Body (JSON)

Field	Type	Description	Required	Example
code	string	Current OTP code (from authenticator app/SMS).	Yes	"987654"

Example Request Body:

json

{
  "code": "987654"
}

---

Response (200 OK)

Confirms 2FA deactivation status.

Response Fields

Field	Type	Description	Example
success	boolean	true if 2FA was disabled, false otherwise.	true

Example Response:

json

{
  "success": true
}

Error Responses

1. Invalid OTP:

   {
     "success": false,
     "error": "Invalid OTP code"
   }

2. 2FA Not Enabled:

   {
     "success": false,
     "error": "2FA is not enabled for this account"
   }

3. Authorization Required:

   {
     "error": "Unauthorized"
   }

---

Notes

• Prerequisites:

  • User must have 2FA already enabled.
  • Requires a valid JWT from an active session.
• Security:

  • The OTP code must be current (typically expires in 30-60 seconds).
  • After disabling, users can re-enable 2FA via /v2/auth/otp/enable.
• Post-Success:

  • Subsequent logins will not require OTP verification.
  • Users should revoke and reissue backup codes if applicable.

Examples

Real request

{ "code": "489309" }

Real response

{ "success": true }